Summary
The Logging Mode section allows you to configure settings for alerts. On the Device Configuration (Logging Mode Settings/Performance Protection) screen, you can enable or disable alerting of permitted and blocked packets. You have the option of setting the Logging Mode to Always or Disable if congested. If you set the Logging Mode to Disable if congested, you can set the following logging options:
Congestion Percentage: percentage of congestion that must be met in order for logging to be disabled.
Disable Time: amount of time in seconds (between 60 and 3600 seconds) that logging will be disabled after the congestion percentage is met.
Details
Procedure:
- Log in to the SMS from a client.
- On the SMS toolbar, navigate to the Devices > All Devices and expand the tab.
- Select an IPS device from the display window and do one of the following:
- Right-click and select Edit > Device Configuration.
- On the top menu select Edit > Details > Device Configuration.
- Double-click the device and click on Device Configuration.
- On the Device Configuration Wizard screen, click the Logging Mode Settings/Performance Protection tab.
- Specify the Logging Mode as Always or Disable if congested.
- If you select Disable if congested, specify the following options:
- Congestion Percentage: percent of congestion that triggers disable time. If the packet loss breeches the threshold, the system disables alerting according to the amount of configured time.
- Disable Time: amount of time that logging will be disabled after the congestion percentage is reached. After the time period passes, alerting enables until the threshold is exceeded again.
- Click OK to update the device.
Reference: SMS User Guide
